Answered by:
WGA problem

Question
-
I have a Dell computer that is telling me know it has a non-genuine Windows on it. The key listed below does not match the key on the licence on the case. But Windows does not give me the option to change the key.
Here is the Windows Genuine Advantage Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {D3B3B5A8-C361-400D-BA78-3413989A4D39}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.110622-1506
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D3B3B5A8-C361-400D-BA78-3413989A4D39}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-256192620-2187183705-636257145</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Vostro 220 Series </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>1.2.0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090626000000.000000+000</Date></BIOS><HWID>54FB3D07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>FX09 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>41E1D27EA4F3F0E</Val><Hash>af1ptunFueu6vnHg/ysNst/xv80=</Hash><Pid>81602-903-2706141-68475</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700524-02-1033-7600.0000-3082009
Installation ID: 015412517263714466092535011084557585322702868321971233
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 11/18/2011 4:23:55 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000003EFFF
Event Time Stamp: 11:16:2011 04:07
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watadminsvc.exe
Tampered File: %systemroot%\system32\wat\watweb.dll
Tampered File: %systemroot%\system32\wat\npwatweb.dll
Tampered File: %systemroot%\system32\wat\watux.exe
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
Tampered File: %systemroot%\system32\drivers\spldr.sys
HWID Data-->
HWID Hash Current: LgAAAAEAAQABAAMAAAABAAAAAQABAAEAeqgQC8gE8CLeDDylYB7OcBjrBtFGyg==OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 062609 APIC1626
FACP 062609 FACP1626
HPET 062609 OEMHPET
MCFG 062609 OEMMCFG
SLIC DELL FX09
OEMB 062609 OEMB1626
GSCI 062609 GMCHSCI
SSDT DpgPmm CpuPmFriday, November 18, 2011 10:27 PM
Answers
-
"MBachtold" wrote in message news:c8529c2b-1132-4d8e-b1ed-f0a593eee79c...
I have a Dell computer that is telling me know it has a non-genuine Windows on it. The key listed below does not match the key on the licence on the case. But Windows does not give me the option to change the key.
Here is the Windows Genuine Advantage Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 11/18/2011 4:23:55 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000003EFFF
Event Time Stamp: 11:16:2011 04:07
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watadminsvc.exe
Tampered File: %systemroot%\system32\wat\watweb.dll
Tampered File: %systemroot%\system32\wat\npwatweb.dll
Tampered File: %systemroot%\system32\wat\watux.exe
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
Tampered File: %systemroot%\system32\drivers\spldr.sysYour problem is the number of Tampered files. It sounds as if certificates are missing.(Have you been using some kind of cleanup utility? – a registry cleaner, or a disk cleaner?)http://support.microsoft.com/kb/822798 should help
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Monday, November 21, 2011 10:29 PM
- Marked as answer by Darin Smith MS Wednesday, November 23, 2011 8:58 PM
Saturday, November 19, 2011 6:18 AMModerator
All replies
-
Dear MBachtold,
Please try these steps: http://windows.microsoft.com/en-US/windows/help/genuine/product-key
If you still have a problem, please record any error messages.
Regards,
Andrew
- Proposed as answer by motherboardlove Saturday, November 19, 2011 2:09 AM
- Unproposed as answer by Darin Smith MS Tuesday, November 22, 2011 11:05 PM
Saturday, November 19, 2011 12:48 AM -
No real error message, just the absense of the "Change Product Key". It only says Windows is actived, and give a product ID 00371-OEM........
I ran KeyFinder and it came up with the same Windows key as listed above in the Windows Genuine Advantage Diagnostic Report. That Key, Windows Product Key: *****-*****-M3DJT-4J3WC-733WD is not the same one that is on the DELL Windows 7 Pro OA licence on the case. I know this is a valid DELL computer because my nephew bought it from DELL.
I don't know if a virus changed it, or if DELL used some kind of Volume license not matching the license sticker??? Or is this some kind of Win 7 Glitch?
I just need to get this computer running fine, without a fresh install if possible. Any Ideas?
Thanks for help.
Saturday, November 19, 2011 1:58 AM -
I found this and I think it fixed my proplem:
How to Change Windows 7 Product Key from DOS
1. Click on Start (the Orb) and type ‘cmd’ in the search box.
2. This will open Command Prompt, or you can add Command Prompt in your right-click menu.
3. Now type the following in Command Prompt and press Enter.
slmgr.vbs -ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
Note: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX should be your product key.4. Once done, type
slmgr.vbs -ato
to activate your Windows 7.- Proposed as answer by motherboardlove Saturday, November 19, 2011 2:09 AM
- Unproposed as answer by Darin Smith MS Tuesday, November 22, 2011 11:05 PM
Saturday, November 19, 2011 2:07 AM -
I have a couple of comments:
Your problem is the large number of mismatched and tampered files in your report. Changing your product key won't help. Unfortunately I am not yet competent enough to provide a solution. Someone will be along soon. have you restored from a disk image?
Here is some info on why your installed product key differs from your COA.
Computers, which are built by large manufactures that come with Windows Pre-Installed, come with two (2) Product Keys:
A) OEM SLP: This key comes pre-installed in Windows, when it comes from the Factory. This key is geared to work with the special instructions found only on that Manufacturer's computer hardware. So when Windows was installed using the OEM SLP key (at the factory) Windows 7 looks at the motherboard and sees the special instructions and Self-Activates. (that's why you did not need to Activate your computer after you brought it home)
B) COA SLP: This is the Product key that you see on the sticker on the side (or bottom,[ or inside the battery compartment]) of your computer. It is a valid product key, but should only be used in limited situations (such as if the OEM SLP key stops self-activating for whatever reason). The key must be activated by Phone. (Note: All manufacturers that use the OEM SLP system are required by contract to include a Certificate of Authenticity (COA) sticker, that has a COA SLP key, on the computer)
- Edited by george1009Editor Saturday, November 19, 2011 2:48 AM
Saturday, November 19, 2011 2:47 AMAnswerer -
"MBachtold" wrote in message news:c8529c2b-1132-4d8e-b1ed-f0a593eee79c...
I have a Dell computer that is telling me know it has a non-genuine Windows on it. The key listed below does not match the key on the licence on the case. But Windows does not give me the option to change the key.
Here is the Windows Genuine Advantage Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
Licensing Data-->
Software licensing service version: 6.1.7601.17514Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 11/18/2011 4:23:55 PMWindows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000003EFFF
Event Time Stamp: 11:16:2011 04:07
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\wat\watadminsvc.exe
Tampered File: %systemroot%\system32\wat\watweb.dll
Tampered File: %systemroot%\system32\wat\npwatweb.dll
Tampered File: %systemroot%\system32\wat\watux.exe
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys
Tampered File: %systemroot%\system32\drivers\spldr.sysYour problem is the number of Tampered files. It sounds as if certificates are missing.(Have you been using some kind of cleanup utility? – a registry cleaner, or a disk cleaner?)http://support.microsoft.com/kb/822798 should help
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth- Proposed as answer by Darin Smith MS Monday, November 21, 2011 10:29 PM
- Marked as answer by Darin Smith MS Wednesday, November 23, 2011 8:58 PM
Saturday, November 19, 2011 6:18 AMModerator -
I do not use cleanup utilities, but I am sure they ran something. They have had malware several times and I found traces of "AV Guard Online". Thanks for the help though.Saturday, November 19, 2011 3:38 PM
-
"MBachtold" wrote in message news:ba5afc59-fda9-41c1-a532-09765d045e58...I do not use cleanup utilities, but I am sure they ran something. They have had malware several times and I found traces of "AV Guard Online". Thanks for the help though.Did you look at the link I posted?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothSaturday, November 19, 2011 6:44 PMModerator -
No further reply from the Original Poster.
Issue is assumed to be resolved.
Darin MSWednesday, November 23, 2011 8:58 PM